Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: G9/QHuwzbG88p6BxGDgZ7MUaQlCtJ79+T0SLw29B7mY=
Subject key identifier: BE:78:E9:E2:C2:7D:EA:B5:B0:91:03:61:8E:59:32:F8:87:A1:CD:D9
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 019A50E404F6A422257DEA2F7B1D63732D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 22:01:51 +0000
Manifest this update: Tue 04 Nov 2025 22:01:51 +0000
Manifest next update: Wed 05 Nov 2025 22:01:51 +0000
Files and hashes: 1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: iFy9nJmLnzwvDIOvFEKDft3vDFuoLAzY/B+d8FKe92I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:04:f6:a4:22:25:7d:ea:2f:7b:1d:63:73:2d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Nov 4 22:01:51 2025 GMT
Not After : Nov 5 22:01:51 2025 GMT
Subject: CN=be78e9e2c27deab5b09103618e5932f887a1cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:81:e1:2e:6c:c8:38:cb:f9:59:05:42:fa:
48:28:12:d8:8b:db:b0:66:f4:ad:91:20:57:68:ac:
32:30:85:95:7f:4e:3e:44:ee:53:38:ea:ad:19:06:
80:5b:c9:02:41:c7:19:c2:3c:e7:d0:fa:a5:49:2c:
f8:5e:9e:a6:b8:3f:b1:4d:cd:11:ae:ec:3e:ce:04:
3d:b1:19:a8:b8:8c:91:ae:fe:f6:b9:2e:46:7f:9e:
13:50:70:3f:38:12:74:ba:5a:90:a6:ec:21:9e:00:
49:9e:45:73:70:e8:70:80:dd:61:a0:49:f8:f6:c2:
a7:94:e1:6a:25:eb:33:da:1c:a8:be:e9:fb:5c:50:
e6:71:4f:76:3a:38:bf:65:04:18:71:38:6d:4c:8c:
16:18:e5:c7:71:55:06:de:aa:1f:a4:e1:10:5a:84:
2c:ff:33:f6:36:bf:98:1b:77:6e:6d:63:dc:0c:78:
b2:7b:5a:a2:f6:ce:a2:24:dd:a1:c6:93:4d:d1:23:
c9:30:f4:0c:f3:23:ec:f1:9a:a1:75:d4:34:82:a4:
a0:4b:91:4e:af:ea:13:5d:41:dd:8b:ed:1c:e1:22:
21:16:be:b0:37:12:bc:10:8c:78:25:66:2f:b1:a0:
86:35:25:db:f8:a4:00:fc:14:d1:32:66:ab:cf:76:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:E9:E2:C2:7D:EA:B5:B0:91:03:61:8E:59:32:F8:87:A1:CD:D9
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:95:c1:6c:bb:d0:68:a7:2a:14:cf:9a:75:7f:48:fd:86:45:
19:04:a9:2b:95:69:89:0c:ea:58:bc:1a:4c:1e:15:14:30:4c:
40:88:e5:18:7f:8e:57:e8:9a:d4:b6:c3:69:09:63:5a:e5:c0:
58:fe:bd:29:8b:d1:56:6e:17:b5:98:c5:8c:3f:f0:30:a8:b0:
60:12:79:d0:9c:2a:d3:ef:90:4a:0d:2a:54:3d:d6:47:27:7d:
7a:c1:23:09:c0:50:4f:a9:29:b4:7b:ae:c7:4e:7e:73:47:96:
c4:99:bd:f8:4c:da:dd:b8:0f:76:0b:ce:c8:46:3e:13:2c:03:
bc:21:6d:2b:65:be:58:91:98:bd:0f:bb:49:20:c2:98:02:bb:
cb:27:ed:de:d6:04:c4:fa:ce:39:ab:1f:8b:0a:42:7d:b0:4b:
11:86:14:44:6d:f5:0e:29:90:d8:43:c4:e3:3a:80:3a:13:17:
f0:bc:21:c3:19:41:2a:b5:e1:b5:ef:05:48:26:a6:5d:b7:bd:
d4:3c:25:a2:8e:0f:f9:b1:02:f3:1b:70:c1:86:04:6a:c9:ef:
32:7f:42:5f:47:fc:d6:55:18:d7:94:33:0b:df:37:51:fa:c0:
81:3c:9e:1d:df:84:9b:8f:39:22:ac:84:aa:b0:41:9a:55:31:
d5:38:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:54 2025 by rpki-client